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Goals for this class 


e Provide basic introduction to IP 
networking 

e Understanding of the protocols, IP 
addressing, and history 

e Provide tools for some basic 
troubleshooting and network 
information. 
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Why the Change? 


e All transport is migrating towards data. 

— Analog phone lines going away. 

— Data networks are everywhere. 

— Transport shared between voice and data. 
e The world is computer centric. 
e New products tend to be data oriented. 


e Remote operation of equipment from almost any 
place 
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Where is it all going? 
Voice and data becoming one. 
— Transport is all data. 


— Analog voice only at the human interface. 
— Data and voice indistinguishable in the network. 


Digital interfaces are easy and cheap to design. 


Data networks require higher bandwidths for 
mixed traffic. 


When will this occur? It already has! 
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Why IP? 


¢ Typical radio network today 


athe 


Leased ne Link 


Dispatch Center 
Leased Line Radio Sites and Equipment 


If multiple channels at any site, 
i one phone line for each channel required. 


Remote Desktop 
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Why IP? 


e Analog connections today. 


Main Engineering Public Works Radio System 
gee | Office 


: Radio Site at 
eased Phone Lines Water Tank 


City Hall 


Maintenance EEE 
Shop LJ Park Office 
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Why IP? 
e What do those examples have in 


common? 


— Use of dedicated phone lines or other 
interconnection method for each site/channel 


— Use of dedicated phone lines to interconnect 
remote console positions 


— High on-going costs for dedicated facilities 


— Loss of one connection point could cause loss of 
communications 


— Dedicated facilities are expensive 
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Why IP? 


¢ Typical IP network example 


Leased Line/MW/Radio Link 


al 
f8 aE Og 


Existing LAN 
t Radio Sites and Equipment 


_ DSL/Data 
- Connection 
ae 
28 Se Bg Existing LAN 
oe, 


If multiple channels at any site, only one data 
Circuit required. 
J Existing LAN 


Dispatch Center IP Gateway 


Remote Desktop 
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Why IP? 


e An IP example. 


athe 
Radio Site at 
Water Tank 


Public Works Radio System 


Main Engineering 
Office DSL/Data SEES 


Connection IP Gateway 


Desktop Remote Existing LAN 


Consoles 


Existing LAN 
i Existing LAN Interconnection, 


City Hall 


County LAN 


Existing LAN 
Maintenance 
Shop 


Desktop Remote Consoles Existing LAN 


i Park Office 
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IP Network Example 


=the 


School District Radio System 


MotoTRbo Repeater 
School A DSL/Data 
Connection MotoTRbo Repeater 
School B 


Existing LAN 
Interconnectio! 


School District 
LAN 


Console Control Stations 
MotoTRbo Repeater 
School C 
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Why IP? 


¢ Typical radio network today during failure 


ate 


Leased es Link 


Dispatch Center 
Leased Line Radio Sites and Equipment 


If multiple channels at any site, 
Yt An one phone line for each channel required. 


Remote Desktop 
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Why IP? 


e Another IP example - Backup 


Backup Radio System Radio Site at 
Water Tank 


DSL/Data 
Connection 


Existing LAN 
Interconnection, 


Existing LAN 


~ va Wireless 
Connection 


zzz, Existing LAN 
City EOC y__\ 


County EOC Mobile Command Post 
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How can IP be used for radio? 


It is a method of interconnecting consoles, radios, 
telephones, and other devices 


It is not transmitted over-the-air to the user radios 
IP + P25 


Uses standard Internet Protocols (IP) 


— TCP/IP — Most reliable format because provides guaranteed 
delivery but not generally used for voice because of 
bandwidth 


— UDP/IP — Uses less bandwidth but may be less reliable 
because no guaranteed delivery 

— Uses many of the standards and protocols available in most 
data networks but not necessarily allowed by the network 
manager 
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The Promise of IP 


Reduces costs because existing data networks can be used 
Easy to use, interconnects many different brands of equipment 


Control consoles can be located anywhere there is a data 
network and a simple laptop can be used 


Reduces costs because standard computer hardware can be 
used 


Great for disaster recovery and back up because IP data 
networks are often more resilient than voice or dedicated 
facilities 

Reduces costs because one data circuit can handle multiple 
base stations 


Interconnects many different kinds of equipment such as cell 
phones, 2-way radio, Internet Phones, VoIP phones, etc. 


Plug and Play 
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OSI Model 


e Open System 
Interconnection 


e Seems esoteric but 
is important to ; : 
understand how Ease 


Ensures delivery of entire 
age. 


various network ree 


Network Layer 
components work. sateeernsetee 
. Data Link (MAC) Layer 
Released in 1983 naptagweatston 


Physical Layer 
Electrical signals and cabling. 


From Computer Desktop Encyclopedia 
© 2004 The Computer Language Co. Inc 


UPPER LAYERS 


LOWER LAYERS 
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OSI Model 


Layer 1 — Physical Link 
— Voltage 

— Number of wires 

— Pin outs 
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Layer 1 Wiring 
e Layer 1 Wiring standards 


e Connector 8P8C (not really RJ45) 
— TIA 568A 


e Recommended for general use 
¢ Compatible with T1 USOC RJ-48C 
e Recommended for home networks TIA 570 


¢ Compatible with voice telephone line RJ11 type 
connections 


— TIA 568B 


e Most common in commercial applications 
e Legacy “Bell System” wiring (Merlin systems) 
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Layer 1 Wiring 
e TIA 568 Pin outs 


Pair 2 Pair 3 


Pair 3{ Pair 1] Pair 4 Pair 2 | Pair 1] Pair 4 


Pe | 
Yi lf a 


| 
ia 
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OSI Model 


e Layer 2 — Data Link — 
— Media Access Control (MAC) Addresses 
— Ethernet, Token Ring, Frame Relay, ATM 
— Data “Switches” usually work at this level 


— LAN Cards — Usually Layer 2 depending on 
card 


— Ethernet uses Carrier Sense Multiple 
Access with Collision Detection (CSMA-CD) 
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OSI Model 


e Layer 3 — Network Layer 
— Higher level addressing 


— Handles communications between network 
Switching points. 


— Routers generally operate at this level 
— IP, SNA, Apple Talk 


— IP addresses work at this level 
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OSI Model 


Lower Layers sa 


Pred fie wena 
— Layer 1 - Cables, etc. cceommpnptnines 
— Layer 2 - Ethernet _oe 
. Layer 3 = IP LF a 


Ensures delivery of entire 
file or message. 


rs 


UPPER LAYERS 


Network Layer 


Routes data to different 
LANs and WANs based 
on network address. 


Data Link (MAC) Layer 


Transmits packets from 
node to node based on 
station address. 


LOWER LAYERS 


Physical Layer 
Electrical signals and cabling. 
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OSI Model 


e Layer 4 Transport Layer 
— Transmission Control Protocol (TCP) 


— Ensures data gets from one end to the 
other. 


— Counts packets, etc. 
— Part of the TCP/IP “Internet” protocol 
— Sometimes contains parts of Layer 5 
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OSI Model 


e Layer 5 — Session Layer 
— Manages two-way or one-way transmission 
— Provides communications coordination 
— Often incorporated in Layer 4 
Layer 6 — Presentation Layer 
— Use has changed over time 
— Generally used for encryption now. 
Layer 7 — Application Layer 
— Used to manage the applications such as file transfers, etc. 


Layers 5, 6, and 7 are often merged together in the 
operating system or applications in modern 
computers. 
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Network Data Flow 


e Data flows through the OSI model 
elements. 


System A Information units System B 


7 


6 


Header 4 Data 


Header 3 


Header 2 
Data 
Network 


Data Flow 
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Networking Equipment 
e Hub 

— Layer 1 device 

— Network wire nut 


— All traffic flows to all 
ports 


— Inexpensive switches 
have replaced hubs 


— Hubs maybe required 
for network monitoring 
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Network Equipment 


'NETGEA 


e Switch 
— Layer 2 Device 


— Routes traffic to the network segment with 
the destination device 


— Reduces traffic and collisions on the network 


— Smart switches can provide enhanced 
switching and limited “Layer 3” functions 


— Cannot monitor network traffic unless using a 
“mirrored” port 
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MultiProtocol Label Switching(MPLS) 
e “Layer 2.5” 
e Data agnostic 


¢ Switching decisions 
made on the basis of Physical Layer 
labels assigned when the data enters the 
network 


Connection oriented protocol as opposed to IP 
which is connectionless 

Allows for faster transport of data and applying 
different rules for different labels 
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MultiProtocol Label Switching(MPLS) 


e Ingress router assigns labels to the 
packets 


e Packets are directed to specific 
end point in a deterministic 


LSRA 
Manner igess ec peu 


——S os Ee 
Ey oe ee — es 
Host X ___LSRC 


ai Egress 


ag 
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Networking Equipment 
e Routers 
— Layer 3 Device 
— Connects one network to another 
— Usually provides transport conversion 


— Makes “intelligent” decisions about how to 
route data 
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Putting it all together 


§ LAN Design Guideline 


Proposed LAN Additions 
Proposed devices that connect with an existing 


Corporate Office Remote Office / Proposed Expansi 
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Initial Considerations 


e Shared or dedicated network 
e Shared network should support 


— Multicast — Transmits to multiple points simultaneously 


Bandwidth — Depends on vocoding assume 50k per voice 
channel worst case 


Fixed IP addresses 

Dedicated bandwidth or Quality of Service 
Virtual LAN’s do not guarantee bandwidth 
Delay must be controlled 

Router/Firewall programming control 
Security and virus protection 
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Technical Details 


e Data Networking 
— Common use: 


e TCP/IP for control signals — More reliable 
e UDP/IP for voice data — Less bandwidth 

¢ Multicast — Routing data to multiple points 
e Fixed IP addresses 


¢ Be careful with any network assumptions as different vendors 
have implemented network interfaces differently. 


Quality of service is generally required to ensure delivery of 
audio packets. (Remember they are UDP/IP.) 


Multiple ports may need to be opened in firewalls, etc. for 
proper operation. 


Virtual LANs do not guarantee bandwidth. 
Network security must be managed. 
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Implementing IP * 
e Document your 
network! 


e Workmanship does 
make a difference 


e Details, details, 
details, pay attention 
to the details 
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IP — The Future is Now 


e Good news 
— Can be a very cost effective solution in some 
situations 
— If limitations are not a problem, costs can be 
reduced 
— This technology will eventually become the 
dominate method for radio system interconnection 
because most communications are moving to an 
IP type network 
— Improvements in the interfaces are being made all 
the time 
— Some issues are resolved if implemented on a 
dedicated data network but that raises costs 
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Questions? 


Thank you! 
Joe Blaschka Jr. PE 


j.blaschka@adcomm911.com 
425-489-0125 
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Network Characteristics 


Topology — what shape it is 
Structure — relationship between members 


Switching — pathways for moving information 
Protocol — rules for communication 


ADCOMM 
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Networks 


= Topologies 


CON, 


Mesh Fully Connected 


000000 
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BE client 


Structure 


The relationship ; 

each element = 

of the network 

has to the other The Peer-to-Peer Model 
elements 
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Switching 


-—— circuit switches ————_, 


= Circuit 
— Dedicated channel 
— Persistent 
— Constant bit delay 
— Set up & tear down 


Hess 
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Switching 


» Circuit 


—“Nailed up” “Copper” “Leased Line” 
“Point to Point” 


=» Virtual circuit 
— Setup before transmission 
— Persistent 


— Really connection-oriented packet 
switching 
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Switching 


= Packet 
Blocks of data with address headers 
No dedicated or persistent path 
Variable bit delay 
No set up or tear down (no circuit) 


ADCOMM 
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Protocol 


= Rules for communicating 
— Formal description of messages 
— Rules for exchanging messages 
= Suites 
— TCP/IP 
= Reference Models 
— OSI 


ADCOMM 
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Internet Protocol Suite 


TCP IPSec ARP 

IP RIP MAC 

UDP FTP SMTP 
DHCP PPP SNMP 
DNS Site SSH 

POP DSL SSL 

NTP MPLS OTHERS... 
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Internet Protocol Suite 


DNS — Domain Name Service 

POP — Post Office Protocol (POP3) 

MPLS — Multiprotocol Label Switching 

ARP — Address Resolution Protocol 

SMTP — Simple Mail Transfer Protocol 

SNMP — Simple Network Management Protocol 

SSH — Secure Shell 

SSL — Secure Socket Layer 

HTTP & HTTPS — Hypertext Transfer Protocol (Secure) 
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TCP 


= Reliable 


= Provides error free reassembly of IP 
packets & related control 


= Connection-oriented 
= Layer 4 protocol 
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UDP 


= “Best Effort” — unreliable 
No error correction 
Great for streaming media, VoIP 
Connection-less oriented 
Layer 4 protocol 
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NAT 


= Network Address Translation 


» Attempt to resolve IPv4 address 
exhaustion 


= Changes IP and other data in packet as 
it passes through router 


*24.124.17.13 = 192.168.13.5” 


_——[==_> 


24.124.17.13 


SS 


192.168.13.5 
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What is IP? 


Remote Network 


Local Network 
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What is IP ? 


= Anumbering system used to describe 
networked devices uniquely within a 
domain 


=» (Version 4) 32 bit, divided into 4 
“octets” 


— 194.25.140.12 
= Describes “Networks” and “Hosts” 
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IP Addresses - Classful 


= Network and Host: 
—N.N.N.h (Class C address) 
= 194.25.140.(0-255) 
—N.N.h.h (Class B address) 
= 129.25.(0-255).(0-255) 
—N.h.h.h (Class A address) 
= 116.(0-255).(0-255).(0-255) 
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IP Network Classes 


172.x.x.x 


Class A : N.h.h.A 


Class B: N.N.h.A 


Class C: N.N.N.h 


| 
172.25.140.10 172.25.140.11 172.25.140.12 172.25.140.255 
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IP Addresses 


=» More networks = fewer host addresses 
» Fewer networks = more host addresses 
= Problems? 

bits bits networks network 
Class A 8 24 128 (27) 16,777,216 (224) 


Class B 16 16 16,384 (214) 65,536 (216) 
Class C 24 8 2,097,152 (221) 256 (28) 
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IP Addresses 


= Classless Inter Domain Routing (CIDR) 
— Break out addressing anywhere 
— More flexibility 
— No huge jump in N vs h 

= Combines IP address & Subnet Mask 

» 192.13.10.0/24 indicates “range of 


network addresses from 192.13.10.0 
through 192.13.10.255” 
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IP Versions 


» [Pv4 
— 4 billion address (4.3 x 10%9) 
— 32 bit addressing (4 octets) 
= IPv6 
— 128 bit addressing (8 hextets) 
— 340 undecillion, or 3.4x10%38 addresses 
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IP Version 6 


= 8 groups of 4 hexadecimal digits 
separated by colons 
= 2001:0db8:85a3:0000:0000:8a2e:0370:7334 
= Abbreviation rules: 
— Drop leading 0’s in a 16 bit digit 
— Single consecutive 0 groups replaced by :: 
— Can't use :: twice in one address 
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IP Version 6 


= 2001:0db8:85a3:0000:0000:8a2e:0370:7334 
becomes 

= 2001:db8:85a3:0000:0000:8a2e:370:7334 
(drop leading 0’s) or 

= 2001:0db8:85a3::8a2e:0370:7334 (groups of 
O's replaced by colons) 

= 2001:db8:85a3::8a2e:370:7334 (both) 
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IP version 6 
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IPv6 Features 


2134:0000:0000:8a2e:0000:0000:0000: 7334 
becomes 


2134::8a2e:0000:0000:0000:7334 
OR 

2134:0000:0000:8a2e::7334 

NOT 

2134::8a2e::7334 
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Flexible N v h allocations 

Unicast Global, Unicast Link Local, Anycast & Multicast 
Neighbor discovery 

Removes need for NAT 

Autoconfiguration at host 

Built in transport security 


Improved headers, including Flow Label (QoS) and extended 
headers 


MobileIP (MIP), IMS mandatory support 
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IPv4 to IPv6 Transitions 


= Dual Stack: hardware runs IPv4 & IPv6 
both 

= Tunneling: One protocol goes inside the 
other 


= Network Address Translation — Protocol 
Translation (NAT-PT): translates one to 
the other 
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IP Packet Header 


Humber of 
network 


hops 


Address of 
sending 
node 


Adress of 
intended 
receiving 
node 


o 


IP Header Length fin 32-bit words) Type of Service 


4 


{Net used) 
3 


IH ToS 1 Bbit total jenct— 


1&bitidentitication —_|flagsfTFbit fragment offse 
TL i protocol | TE bit header checksum 


F2bit source IP address 


2hitdestination IP address 


options fifany) 


data, 


Type of transport pretocel to be used 
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Size of datagram (header + cata} 


Flags & Fragmentation 


oe 


to spit large messages 


irto a series of IP packets 


Dont Fragment 
Unused 


Checksum bo detect any 
corruption of the IF 
header within a router 


Data to be sent to receiving node 
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Class breakdown 


CIDR Default 
suffix) subnet mask 


Class A 0.0.0.0 | 12Fe255'256:255 255.0.0.0 
‘Class B 128.0.0.0) 191.255.255.255 255.255.0.0 
Class C | 192.0.0.0) 223.255.255.255 255,255.255.0| 
Class D (mutticast)| 224 .0.0.0)| 239.255.255.255 not defined 
Class E (reserved) | 240.0.0.0)| 255.255.255.255 not defined 


Class Leading bits| Start End 
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Subnetting: Why you care 


= Subnets define what is IN your network 
and what is OUT 


= Addresses in network are handled 
locally 


= Addresses out of network are sent to a 
“gateway” 


= Common place to screw up network 
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Why Subnet? 


Aaa ne 


209.165.200.101 209.165.210.14 209.165.220.10 


209.165.200.102 209.165.210.15 209.165.220.11 


209.165.200.103 209.165.210.16 


209.165.220.12 


209.165.200.104 209.165.210.17 2081 Bo22 0.18 


209.165.200.1 209.165.210.1 209.165.220.1 
255.255.255.224 255.255.255.224 255.255.255.224 
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Subnetting: What it is 


= The Subnet Mask defines the size of 
your network. 


= Mask tells your computer/router which 
addresses to send data to directly and 
which data to send to the Gateway (to 
be forwarded to the next hop on the 
Internet). 
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Binary Math 


= Base 2 math: ALL 1's and 0's. 
= Base 10 math: 0 through 9 


= Base 10: Places are (right to left): 10°, 
10!, 102, etc. 


= Base 2: Places are (right to left): 2°, 21, 
22, etc. 
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Binary Math 


= Common numbers: 


Base 10 


10000000 
11111111 
11000000 
10101000 
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Routing Table 


Destination | Subnet mask | Gateway 

192. 168.40.0 |255.255.255.0 |local 

10.65.1.0 255.255.255.0 llocal 

192. 168.32.0 |255.255.255.0 |192.168.40.13 
192.168.35.0 |255,255.255.0|192.168.40.14 
192.168.0.0 |255.255.0.0 |192.168.40.13 
10.0.0.0 255.0.0.0 10.65.1.25 

0.0.0.0 0.0.0.0 10.65.1.1 [Default 
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Subnetting 


= By comparing a subnet mask with an IP 
address, systems can determine which 
portion of the IP address _ relates to the 
network, and which portion relates to 
the host. 


= Logical AND 
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Subnet Mask 


255.255.255.0 11111111.11111111.11111111.00000000 


192.168.40.12 11000000 . 10101000. 00101000. 00000000 


192.168.40.0 
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Practical IP 


= Broken? Do this: 


— Check IP addresses on end & intermediate 
devices 


— Check subnet masking 
= Tools: 


— http://www.subnet-calculator.com/ 
— http://www.tcpipguide.com/ 


— Netstat -—r command 
— Router print 


ADCOMM Engineering Company 


www.adcommeng.com April 13, 2013 


19 


Bridging the Gap Between Operations and Technology® 
Copyright 2013 ADCOMM Engineering Company 


Security 


Firewalls 


Encryption 
— Data and transport 


IPSec 
Physical security 
Administrative controls 
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IP Exploits 


= "Spoofing" 
=» MITM attacks 


= DoS Attacks 


— Ping attacks 
= Smurf/Fraggle (ICMP Echo) 


— DDoS delivery methods 
= DNS oriented attacks 


= ICMP tunneling 
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Security Resources 


= “Security Now” podcast, Steve Gibson & 
Leo Laporte 


= Schneier on Security: 
http://www.schneier.com 


= Dark Reading 
http://www.darkreading.com 
= The TCP/IP Guide 
htt uide.com 
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Questions? 


ADCOMM Engineering Co 
Dave Magnenat, PMP 


D.magnenat@adcomm911.com 
360-377-4657 
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WLAN 
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Pop Quiz 


How many WiFi standards are there? 
a. One: 802.11-2012 

b. Three: 802.11b/g/n 

c. Four: 802.11a/b/g/n 

d. Twenty eight: 


802.11a/b/c/d/e/g/h/i/j/k/m/n/p/r/s/u/w/x/y/z/aa/ac/ 
ad/ae/af/ah/ai 


a. There is only one official standard 802.11-2012. 
It incorporated all approved amendments. The term 
standard is commonly used for the amendments 
which are designated by lower case letters. 
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WIFI Timeline 


The Evolution of WiFi 


802.11ac 
(1.3Gbps) 


802.11n 
(600Mbps) 


Data Rate (Mbps) 


802.11a,g 
(54Mbps) 
802.11 802.11b 
(2Mbps) (11Mbps) a 54Mbps 150Mbps 


0 = 
1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 
Year 


,ADCOMM Engineering Company, 


www.adcommeng.com 4/13/13 


ADCOMM Engineering Co. 


2013 Communications Academy 


Bridging the Gap Between Operations and Technology® 
Copyright 2013 ADCOMM Engineering Company 


How did they get more speed? 
4 
2.4 GHz 5.8 GHz 
= 802.11b/g = 802.11a 
20 MHz channel width 20 MHz channel width 
3 non-overlapping channels 20 non-overlapping channels 
802.11b: 11 Mbps More bits per Hertz 
802.11g: 54 Mbps 802.11a: 54 Mbps 


2.4 and 5.8 GHz 5.8 GHz 

e 802.11n e 802.11lac 
— 20 or 40 MHz channels — 20, 40, 80 or 160 MHz chs. 
— Still more bits per Hertz — Many more bits per Hertz 
— Up to “4 x 4” MIMO — Up to “8 x 8” MIMO 
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What is MIMO? 


4 
MI MO: Multiple Input Multiple Output 
= 802.11n and 802.11ac can simultaneously use multiple 


antennas 
— Space-Time Block Coding (STBC): Sends outgoing data 
redundantly through multiple antennas 
— Spatial Multiplexing (SM): Split outgoing data into multiple 
streams transmitted through multiple antennas 
— Transmit Beamforming (TxBF): Steers an outgoing stream 
toward the receiver to improve received signal strength 
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Actual Field Results 


1 bedeand hetero Te 


€ 2 ope 


Distance: 2.1 miles 


i 1 yates 
wu hes 


Aen / 


ADCOMM Engineering Company 


www.adcommeng.com 4/13/13 


Bridging the Gap Between Operations and Technology® 
Copyright 2013 ADCOMM Engineering Company 


Choices, Choices, Choices 


Different types of Stations 
Different sources of power 
Different antennas 

Many vendors 


ADCOMM Engineering Company 


www.adcommeng.com 4/13/13 


ADCOMM Engineering Co. 


2013 Communications Academy 


— 
Bridging the Gap Between Operations and Technology® a 
Copyright 2013 ADCOMM Engineering Company 


Different Types of Stations ® 
-q 
Most Common Other 
= Access Points — base station for « Bridge — Access Point 

the WLAN communicating with another 


— Connects to Ethernet and access point and no clients 
WLAN Repeater — Base station without 


— Either contains a router or Ethernet connection 
connects to a router WDS (Wireless Distribution 


«Client (sometimes called a Station) mien = zee station eke aS 
_ Mobile: Notebook PC, repeater and access point for 


clients at th me tim 
Smartphone ents at the same time 


— Fixed: Printer, Desktop PC 
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Different Sources of Powelfow 


= Power over Ethernet (PoE) 


— Access Point receives power on unused pairs in 
Ethernet cable 


* PoE (802.3af): up to 15.4 Watts 
* PoE plus (802.3at): up to 25.5 Watts 
« Non-standard PoE for more power 


— Mid-span PoE: Power supply connects between 
router/switch and access point 


— End Station PoE: Router/switch provides power 
— Remember Ethernet distance limit (100 m, 330 ft) 
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Different Types of Antennas 


Omnidirectional: lower gain, 360° pattern 


Directional sector: higher gain, 90° or 120° 
pattern 


Directional dish: highest gain, narrow beam 
Beamforming array: dynamic pattern 


Tracking antenna: directional antenna with a 
GPS based controller and positioner 
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Tracking Antenna and Radio 
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Many Vendors 


« Enterprise 


— Aerohive Networks, Aruba Networks, Cisco, 
Entersys, Hewlett-Packard, Juniper Networks, 
Meraki, Meru Networks, Motorola Solutions, 
Ruckus Wireless 

= Outdoor/Wireless Internet Service Providers 

— EnGenius, InscopeData, MikroTik, Pepwave, 

Ubiquiti 
« Devices don't always interoperate 
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Let’s Implement a System 


= Enterprise: 
— Point to Multipoint 
— Channel Re-use 

= Outdoor 
— Point to Multipoint 
— Point to Point 


,ADCOMM Engineering Company, 
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Enterprise 


= Point to Multipoint 


» Many omnidirectional access points require 
frequency planning 


7-to-1 Reuse pattern for 3-to-1 Reuse pattern for 
5GHz using 20MHz channels 2GHz using 20MHz channels 
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Outdoor Point to Multipoint 


Directional 
Access Points 
2.4GHz 5.8GHz 
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Outdoor Point to Point 


= Roof mount 
« Small inexpensive radio and antenna unit 


,ADCOMM Engineering Company, 
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WLAN: Another Threat to Security 


» Security Measures 
— Hide SSID 
— MAC ID filtering 
— Static ip addressing 


= 802.11 Encryption 


WEP (Wireless Encryption Protocol) | Obsolete, don’t use it 


WPA (WiFi Protected Access) Disables speeds above 54Mbps in 802.11n 
WPA2 (WPA version 2) Recommended 


WPA and WPA2 have two modes: 
¢ Personal — Requires Pre-Shared Key (PSK) 
¢ Enterprise — Requires Radius Server 
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Questions? 


a 
a 
| 


Thank you! 


Scott Peabody, PE 


adcomm911.com 


s.peabod 
425-766-6314 
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Network Troubleshooting 
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Demo Network Configuration 


NETGEAR 


10.10.50.1/30 


NETGEAR 
SWITCH 


Network Configuration 
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Basic Command-Line Tools 


= ping 
— Determine whether particular host is reachable 
— Sends “echo request” packets to target 


— Measures round-trip packet time & packet loss 


examples: ping -t 172.25.140.1 
ping www.yahoo.com 


« traceroute (tracert) 


— Determines route taken by packets across an IP 


network 
examples: tracert 172.25. 160.1 
tracert www.google.com 


,ADCOMM Engineering Company, 
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Basic Command-Line Tools 


« ipconfig 
— MS Windows console application 
— Displays current TCP/IP network configuration 
values 
= IP address 
= Subnet mask 
= Gateway 
= DHCP server 
DNS servers 
other details 
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Basic Command-Line Tools 


= telnet 
— Interactive remote login tool 


— Generally used to access a command line interface 
on a remote host (or device) 


— Default TCP port 23 
example. telnet 172.25.140.50 


« netstat -r 
— Display PC routing table 


,ADCOMM Engineering Company. 
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Windows Tools 


Y Profle: (Quick scan 


= NMAP/ Zenmap 
“Network Mapper” 
Network exploration 
tool 
Identifies Hosts & az 
Running Services : Belsesacea (ott tebe Tet 
TCP/UDP port scanner ie : 7 " 
NMAP: command line wget mam 


ce 


Zenmap: GUI iki tem cet 


on 172.25.140.40 


http://nmap.or: 
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Windows Tools 


4 TCPView - Sysinternals: www.sysinternals.com 
Eile Qptions Process Yaw Help 
Gai 


Process 


= TCPView gece ._ = 


— Lists all TCP & UDP 


port endpoints on a 
PC 


— Similar to netstat =|; =... i pd 
command in Unix =: — 
and Windows 


http ://technet.microsoft.com/en-us/sysinternals/bb897437.aspx 
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Windows Tools 


«= Networx 


Live monitoring of incoming & 
outgoing TCP/IP bandwidth 
Also built-in ping, traceroute, (= =2izarin 


netstat, and other advanced | qamammem im Lj > 
features 


Free MS Windows application | iscsvcc. Sts; Sake 


@ Current Transfer Rate 1.14 Mbit/s 30.9 kbit/s 
@ Maximum Transfer Rate 10.8 Mbit/s 
= Total Data Transferred 39.38 


See also: Windows 8/7/Vista | °™ zara 
Resource Monitor 


http://www.softperfect.com/products/networx/ 
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Mame query NBSTAT *<O0> <O0> 00> <X 
° 


1900 Destination por 


100 NB NB10061D< 


109251: 


192.168.0.1 (192.168.0.1) 


98 (00) 


Witte > 3196 (SYN, ACK] SeqeO Aci 
0, Len: 


H Eoresson... Yeceor ¥ sooty 
Who has 192.168.0.27 


wp Source port: 


ARP. 
NONS 
3196 (3196), Ost Port: http (80), Sea) 


S883 


x*%S8 Bere Fe SS 


#0) 


« 
(relative sequence number) 


192.168.0.2 (192-168.0.2), Ds 


tp 


192 
64240 


32 1.227282 
Source port: 3196 (3196) 
Header length 


+ Flags: Ox0002 (SYN) 


Window size 


Transmission Control Protocol, Src Port 


> Frame ii (62 bytes on wire, 62 bytes captured) 
Internet Protocol, Src: 


# Ethernet IZ, Src: 192.168.0.2 (00:0b:5d 
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— “Deep packet 
http://www.wireshark.or 


» Wireshark 


Bridging the Gap Between Operations and Technology® 


Copyright 2013 ADCOMM Engineering Company 


Wireless Tools 


» inSS!I Der 


nw 


“sniffer 


— Wireless network 


ider/ 


inss 


//www.metageek.net/products/ 


http 
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Wireless Tools 


= Mobile Apps 
— Android WiFi Analyzer 


* Graphical or tabular display of 
Wi-Fi networks in range 
Shows signal strength vs channel 
or time 
Similar functionality as inSSIDer 
but for mobile phone 
Not available for iOS devices 
(Apple iPhone, iPad) 


http://a.farproc.com/wifi-analyzer 
.google.com/store/apps/details?id=com.farproc.wifi.analyzer 
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Questions? 


= Thank you! 
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